Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/nZC0JVqZQXrZf1Jm_ZX-Z5nNzWk.roa
File:                     nZC0JVqZQXrZf1Jm_ZX-Z5nNzWk.roa (raw, json)
Hash identifier:          aRiawlbURdZfImD1YHiM9hy1E5PA00Vdl1XO7m9IZLk=
Subject key identifier:   9D:90:B4:25:5A:99:41:7A:D9:7F:52:66:FD:95:FE:67:99:CD:CD:69
Certificate issuer:       /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial:       0261CA
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/nZC0JVqZQXrZf1Jm_ZX-Z5nNzWk.roa
Signing time:             Tue 04 Jan 2022 07:26:48 +0000
ROA not before:           Tue 04 Jan 2022 07:26:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197581
IP address blocks:        46.235.233.0/24 maxlen: 24
                          46.235.232.0/24 maxlen: 24
                          46.235.232.0/21 maxlen: 21
                          46.235.237.0/24 maxlen: 24
                          46.235.234.0/24 maxlen: 24
                          46.235.236.0/24 maxlen: 24
                          46.235.235.0/24 maxlen: 24
                          46.235.239.0/24 maxlen: 24
                          46.235.238.0/24 maxlen: 24
                          2a00:5ec0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156106 (0x261ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
        Validity
            Not Before: Jan  4 07:26:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9d90b4255a99417ad97f5266fd95fe6799cdcd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ae:38:1c:10:aa:54:49:bc:e4:29:99:e3:3e:
                    f1:5f:a2:d9:77:fe:4d:f2:7e:b9:2e:49:94:72:d0:
                    78:fd:f4:44:24:a7:d7:a2:84:25:a2:72:4e:c7:39:
                    59:39:06:ea:dd:7a:2e:0d:b4:25:2a:65:7d:fb:45:
                    da:46:3c:74:0a:6f:9a:36:80:13:44:f1:d2:88:eb:
                    ef:88:b3:fe:1e:16:05:57:5b:24:53:43:7c:e9:27:
                    6b:ff:30:fe:1e:68:2a:4d:53:68:53:57:06:07:36:
                    a1:b4:e3:5e:26:32:e1:02:89:28:8d:6e:12:66:00:
                    1d:05:25:e3:65:43:c7:ab:a2:07:5b:14:34:94:e7:
                    e7:a8:42:f3:2a:55:31:4c:20:88:52:30:6a:09:dc:
                    a6:40:a7:83:0f:04:3c:a6:41:eb:2f:1d:91:73:0c:
                    ae:d4:5f:19:9b:79:a3:19:9c:48:d2:5b:a3:c1:8c:
                    00:b2:7d:64:f0:66:85:17:a6:86:68:2f:7e:3d:ba:
                    3a:63:ae:a4:82:b4:f0:5c:f6:05:63:c4:f7:33:2a:
                    4f:a5:cf:ed:c8:d4:d0:42:22:59:53:e2:43:ac:9d:
                    f7:93:ae:d9:fb:ad:64:19:10:fd:b3:69:b5:c1:46:
                    02:48:25:74:e0:cd:54:81:23:69:7f:b6:cf:2a:c5:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:90:B4:25:5A:99:41:7A:D9:7F:52:66:FD:95:FE:67:99:CD:CD:69
            X509v3 Authority Key Identifier:
                keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/nZC0JVqZQXrZf1Jm_ZX-Z5nNzWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.235.232.0/21
                IPv6:
                  2a00:5ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:94:3f:3e:3d:b8:46:24:a1:0d:85:9e:cf:19:14:cd:ca:fd:
         39:f9:49:de:53:e0:bd:92:d9:8b:ad:22:28:a3:3e:88:6c:a6:
         1e:01:a8:15:bc:e3:ca:4e:80:a9:61:14:29:88:e2:78:0b:44:
         a3:94:00:7a:43:d4:be:d9:43:b0:9c:59:1c:4f:c4:da:74:ca:
         12:c7:44:64:49:6a:87:63:da:30:7b:21:bf:87:cb:9f:ad:69:
         7e:c2:ee:86:f5:33:ed:cd:1c:92:57:c5:d0:7c:a0:34:06:64:
         f7:73:3d:2b:81:70:ff:ad:b0:fb:6d:cc:b3:66:fe:e7:f2:6f:
         93:e2:8e:13:af:da:85:f6:d8:c1:32:2a:65:0f:8d:75:5c:a8:
         0f:73:cf:1e:f1:ad:4b:29:59:e8:0f:48:d8:b4:c2:15:30:46:
         71:c7:20:ad:ed:39:dc:8d:9d:d0:52:2f:ca:35:04:fb:3b:c9:
         f1:ad:27:53:b2:8e:9a:33:f9:ff:8c:9a:47:a4:43:76:3a:90:
         a8:12:79:92:de:0b:13:0a:0a:84:b9:75:d1:c5:55:63:cc:f6:
         6c:44:60:0f:6f:2a:41:c7:b5:09:39:c6:09:a4:8d:ad:db:ad:
         28:9b:49:d2:a7:6f:79:46:64:94:d0:95:4a:f0:ac:88:d4:a3:
         6f:13:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:41 2024 by rpki-client on console-fra.rpki-client.org